A High Speed, Post-Processing Free, Quantum Random Number Generator 
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A quantum random number generator (QRNG) based on gated single plioton detection of an 
InGaAs photodiode at GHz frequency is demonstrated. Owing to the extremely long coherence 
time of each photon, each photons' wavefuntion extends over many gating cycles of the photodiode. 
The collapse of the photon wavefunction on random gating cycles as well as photon random arrival 
time detection events are used to generate sequences of random bits at a rate of 4.01 megabits/s. 
Importantly, the random outputs are intrinsically bias- free and require no post-processing procedure 
to pass random number statistical tests, making this QRNG an extremely simple device. 



Random number generators (RNGs) are important de- 
vices for many branches of science and technology. They 
find applications ranging from medicine [l| to testing fun- 
damental principles of physics [2]- Arguably the most 
important technological application of RNGs is cryptog- 
raphy [3[. The requirements of the application usually 
determine the particular type of RNG chosen. Fast and 
easily obtainable random numbers can be generated from 
a simple computer algorithm, suitable for Monte Carlo 
simulations for example Q. However, such an RNG is 
termed "pseudo" random as the random numbers are 
based on a deterministic pattern that will eventually re- 
peat itself. The random number pattern is completely 
predictable. An RNG based on physical noise or some 
classical chaotic process improves upon the pseudo-RNG 
in terms of unpredictability although the bit rate of a 
physical RNG is usually much slower, limited to a few 
hundred kilohertz [g]. 

Complete unpredictability of random number gener- 
ation is desirable for a number of applications, notably 
most demonstrations of quantum key distribution (QKD) 
[a| which requires keys with high quality random bits. A 
useful advance in realizing high quality RNGs has been 
to utilize quantum mechanical uncertainty in the gener- 
ation of random numbers |7[, so-called quantum RNGs 
(QRNGs). Some of the most efficient and high bit rate 
QRNG demonstrations over the past few years have been 
based on single photon detection in conjunction with ei- 
ther spatial or temporal discrimination or a combination 
of both[8|,l9[. Spatial discrimination is simply realized by 
use of a 50:50 beamsplitter with two single photon de- 
tectors; each detector monitors one of the beamsplitter 
output ports. A source of photons, conveniently derived 
from a laser attenuated down to the single photon level, 
impinges upon the input port of the beamsplitter. There 
is a 2 probability that one of the beamsplitter output 
port detectors will measure an incident photon. Thus a 
random binary digit bitstream can be realized based on 
quantum mechanical uncertainty. Unfortunately from a 



practical point of view the random bits generated will not 
be completely free from bias as the two detectors will al- 
most certainly have unequal detection efficiencies and it 
is very difficult to ensure the beamsplitter will have ex- 
actly 50:50 transmission reflection probabilty. The first 
problern can be somewhat circumvented by using one de- 
tector [lO|. However, the second problem is very difficult 
to solve. Therefore, post bit collection processing is in- 
evitable to unbias the raw random bits. 

We note a useful QRNG based on temporal discrim- 
nation ofphoton arrival times has been demonstrated 
recently achieving a random bit rate of ^ IMbit/s. 
However, similar to many of the spatial discrimnation 
schemes, some post processing of the raw bits was needed 
to produce random bits of high enough quality. 

In this paper we propose and demonstrate a new tech- 
nique to generate random bits quantumly. It uses a fun- 
damentally different method to those QRNGs proposed 
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FIG. 1: (Color online) Schematic of the QRNG setup. A DFB 
CW laser (155Qnm) attenuated approximately to the single 
photon level impinges upon an InGaAs APD. The APD is bi- 
ased at a DC level of 45.9V and a superimposed a square wave 
modulation of amplitude 6V and frequency 1.03GHz which 
drives the device above breakdown. The resulting signal is 
sent through a self-differencing circuit, to remove the capaci- 
tive response, before being amplified and then finally sent to 
time tagging single photon counting electronics. 



previously. It is a simple device requiring only one source 
of photons (a CW laser attenuated to the single photon 
level) and one single photon detector. The photons are 
emitted at random intervals determined by the quantum 
mechanics of photonic emission. They also have very long 
(^ 1/is) coherence times. This long photon coherence 
time means the photon wavefunction extends over many 
gating cycles of the detetor. The collapse of the photon 
wavefunction on a random detector gating cycle signals a 
detection event and these random arrival events are con- 
verted into sequences of random bits. Furthermore, the 
QRNG satisfies two key requirements: it outputs high 
quality randomness and at a high rate without any need 
for classical post-processing either in software or hard- 
ware. 

The single photon detector we employ is an InGaAs 
avalanche photodiode (APD), operating in gated Geiger 
mode. As is well known, InGaAs APD's can only be oper- 
ated up to a few megahertz due to the unavoidable onset 
of afterpulsing [11|. However, a technique of electronic 
self-differencing shown previously [l4| , can allow the de- 
tector to measure extremely small avalanches permitting 
considerably smaller bias voltages and hence much re- 
duced after-pulsing. Consequently, the detector can be 
driven at very high frequency (> IGHz) before after- 
pulsing becomes problematic. 

The operation of the device is indicated schematically 
in figure [TJ A coherent CW 1550nm laser diode, attenu- 
ated to the picowatt level, is coupled using a single mode 
fiber directly into an InGaAs APD. The APD is held at 
a temperature of — 30°C. Under normal operating condi- 
tions the large capacitive response of the APD obscures 
weak photon induced avalanches. A GHz square wave 
bias pulse train of approximately 6V amplitude is super- 
imposed upon a DC bias of 45.9V, which is approximately 
1.5V below its breakdown value. The APD signal is di- 
vided into two arms and one arm is delayed by one clock 
cycle before the two arms are recombined using a differ- 
encer. As can be seen, the large capacitive repsonse of 
the APD is cancelled leaving behind the weak avalanche 
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FIG. 2: (Color online) A histogram of the photon detections 
in individual clock cycles from the QRNG setup under CW 
illumination. 



signalfT^. With this setup, the InGaAs dark count rate is 
'^ lOkHz. The remaining signal is amplified before being 
sent into time tagging, single photon counting electronics 
rated up to 5MHz. 

Figure [5] shows a histogram of the counts recorded for 
a detector clock frequency of 1.03 GHz and a photon in- 
cident flux of approximately 20pW. A peak can be seen 
in each clock cycle completely separated from each other 
in time by ~ 600ps where no counts are recorded. Any 
overlap of adjacent clock counts could lead to unwanted 
correlations in the final random bit output. The sharp 
and narrow measured width (~ 60 — 70ps) of the clock 
cycle events is due mainly to the avalanche occuring over 
a small interval of the 500ps clock bias period. 

Time tagged count events were recorded for a duration 
of '^ 2 minutes with a CW photon flux of approximately 
20pW at a clock frequency of 1.03GHz. The photon flux 
corresponds to about 0.3 photons per clock period. The 
time tagged events acquired were converted into random 
bits by assigning detection events in even clock cycles as 
a "1" and detection events occcuring in odd clock cycles 
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FIG. 3: (Color online) (a) Results of the NIST statistical tests 
on 500 X 10® bit patterns of binary bits from the quantum- 
RNG. All tests are passed at the a = 0.01 significance level, 
(b) The proportion of passes of each NIST test for the 500 bit 
streams. 
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FIG. 4: (Color online) (a) Results of the DIEHARD statistical 
tests on a block of 5 x 10 bit pattern of binary bits from the 
QRNG. All tests are passed at the a = 0.01 -^ a = 0.99 
significance level, (b) Byte correlation plot of the 5 x 10* bit 
pattern. 
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FIG. 5: (Color online) Calculation depicting the self- 
differencing count rate of the detector (solid line) and the 
experimentally measured self-differencing output (squares) as 
a function of the product of photon flux and detector efficiency 
^v for a clock frequency of ~ IGHz. 



as a "0" . We acquired a large binary file of around 500 
MBit recorded at a rate of 4.01MBps. 

The 500MBit random bit binary file was then sub- 
jected to two statistical test routines (1) the NIST sta- 
tistical test suite [1^ and (2) the Diehard test suite [14l |. 
The NIST test contains 16 individual tests and each test 
evaluates to a probability value or "p- value" . The p- value 
is defined as the probability a perfect RNG would gen- 
erate the particular experimental test result or a result 
indicating a less random bit sequence [13|. A significance 
level a is also assigned for the test. Usually, for crypto- 
graphic applications, a significance level of a = 0.01 is 
chosen [IJ]. This means if the p- value is > 0.01 the bit 
stream passes the test. Additionally because of statis- 
tical fluctuations, we expect 99% of the bit patterns to 
pass a paticular test and 1% to fail. The large experi- 
mental file was divided into 500 x 1MBit separate smaller 
files, and these smaller files were statistically tested; the 
results are shown in Fig. [Sfa). All tests are passed at the 
a = 0.01 significance level. Fig. [31^b) shows the propor- 
tion of passes for each test. The proportions are nicely 
distributed around the expected value of 99%. A confi- 
dence range based on the finite number of the bitstreams 
tested (500) is also shown. All test results are within 
this confidence range of 97.6 -^ 100% for the propor- 
tion of passes. For the second battery of statistical tests 
(DIEHARD) also reports p-value but the significance 
level is slightly differently defined. In DIEHARD's case, 
the siginificance level is rather a range, a = 0.01 — > 0.99. 
Tests with p- values falling within this range are deemed 
to have passed the tests. For the block of 5 x 10^ bits, 21 
tests were applicable. Figure UJ^a) shows that all 21 tests 
are passed. Figure 4(b) shows an 8 bit correlation plot 
for the 5 x 10* bit pattern indicating visually the good 
quality of randomness for the QRNG.|15|. 

Finally, we comment on the performance of the QRNG. 
Currently, the QRNG is limited by the time tagging elec- 
tronics bandwidth which is at the moment 5MHz. How- 
ever, in principle the QRNG should be able to work up 
to around lOOMHz. Figure [5] plots the experimental self- 
differencing output of the detector up to the saturation 
point at lOOMHz as a function of the incident photon flux 
fi and detector efficiency v product: ^v (squares). Also 
plotted is the theoretical self-differencing output (solid 
line) which peaks at around 250MHz. Both experimen- 
tal data and theory drop off after their respective peaks 
as iJ,v further increases. This is due to the probability of 
photon events occuring in adjacent clock cycles becoming 
appreciable. Hence the self-differencing method cancels 
these adjacent events out leading to a reduction in the 
overall count rate. However, experimental data and the- 
ory differ at high iiv and this is due to our assumption in 
the theory that the amplitude of detector avalanches are 
photon number independent. Nevertheless, the experi- 
mental peak value of lOOMHz is the limit of the QRNG 
which is over two orders of magnitude higher than any 
bit rates of existing QRNG's. With improved time tag- 
ging single photon electronics and detector multiplexing 



a GHz QRNG could potentially be realised. 

In conclusion, we have demonstrated an extremely sim- 
ple, QRNG which ouptuts random numbers at a rate 
of 4.01MHz. The random numbers have been subjected 
to stringent statistical tests and are found to pass all. 



The QRNG requires no post-processing of data and the 
bit rates can be increased further with higher bandwidth 
time recorded single photon counting equipment and/or 
through multiplexing. 
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